CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fcb6685c54591db8c6dd7a1442ac49da_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fcb6685c54591db8c6dd7a1442ac49da_JaffaCakes118
Size
81KB
MD5
fcb6685c54591db8c6dd7a1442ac49da
SHA1
0e788bafa26ff8b341e0848d1bab9739badc1fc2
SHA256
7c3fe9359a93a337aac245e4d8c81d085496774ef92418441d10d2404c49194f
SHA512
c08c41700eb4ae5d8bcfc545fa50ee522c331994b6b58837011305bdff42a6616196544f77e28790e9dc9dcc20232a8f2282844d5d1833c3f6f0ce36adbdb95c
SSDEEP
1536:/xLK2OReR3CHBcDcZiHdldIl9YYCO7NBM0Hax12zb1ht6:ZVOReRyHesiHdlel9YYxYEO2FhI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fcb6685c54591db8c6dd7a1442ac49da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE